Privacy Policy

For the purposes of the UAE PDPL, the "Data Controller" of your personal data is:

Maison Velora — Maison Velora Online Seller (Sole Establishment)
Al Barshaa 1, Dubai, United Arab Emirates
Trade License No.: 1624217 (Dubai Department of Economy and Tourism — E-Trader Commercial License)
Email: Maisonvelorascents@gmail.com · Phone: +971 50 162 6249

If you have any questions about this Policy or how we handle your data, please contact us using the details above.

This Policy applies to all visitors, registered users, and customers of our website (the "Site"), including anyone who browses the Site, creates an account, or places an order with us. It does not apply to third-party websites you may access through links on our Site.

We collect the following categories of personal data:

a) Account Data

When you register for an account (required to use the Site), we collect:

• Full name
• Email address
• Password (stored in encrypted/hashed form — we never see or store your plain-text password)
• Phone number (if provided at registration)

b) Order & Shipping Data

When you place an order, we collect:

• Shipping address (street address, city, country)
• Postal/ZIP code (optional)
• Phone number (required, for delivery coordination)
• Order history and contents

c) Payment Data

All payments are processed securely by Stripe, Inc. We do not collect or store your full card number, CVV, or other sensitive payment card data on our own servers. Stripe processes this data directly under its own privacy policy and is certified as a PCI-DSS compliant payment processor. We only receive confirmation of payment status, a limited transaction reference, and the last four digits of your card (for your order history) from Stripe.

d) Technical & Usage Data

We automatically collect limited technical data necessary for the Site to function and for basic security, including:

• IP address
• Browser type and device information
• Login session and shopping cart data (via essential cookies)

We do not use Google Analytics or any third-party advertising/analytics trackers on this Site. We only use cookies that are strictly necessary to keep you logged in and to remember items in your cart.

e) Communications Data

If you contact us (e.g., customer support, order inquiries, returns), we collect the content of your messages and any information you choose to provide.

We use your personal data to create and manage your account, process and fulfil your orders, arrange delivery via courier partners, process payments via Stripe, handle returns, refunds and exchanges, respond to customer service inquiries, keep the Site secure and prevent fraud, comply with tax, customs and accounting laws, and send you marketing communications only where you have opted in. We do not use your personal data for any automated decision-making or profiling that produces legal effects on you.

Our Site uses only strictly necessary cookies required for core functionality, such as keeping you logged into your account and remembering items in your shopping cart/session. We do not use Google Analytics, advertising cookies, or third-party tracking/retargeting pixels. Because these cookies are essential to the Site working, they cannot be switched off through our Site, but you can block or delete cookies through your browser settings — note that doing so may prevent login and checkout from working correctly.

We do not sell your personal data to anyone. We only share personal data with the following categories of recipients, where necessary:

• Stripe, Inc. — to process your payment securely.
• Shiplifier — to deliver your order, we share your name, shipping address, city, country, postal code (if provided), and phone number.
• Base44 (a Wix company) — our website is built and hosted on this platform, which stores account, order, and Site data on our behalf as a data processor.
• Legal and regulatory authorities — where required by UAE law, court order, or to protect our legal rights.
• Professional advisors (lawyers, accountants, auditors) — where necessary for legal or business purposes, under confidentiality obligations.

Because we ship orders worldwide and use service providers (such as Stripe) that operate internationally, your personal data may be transferred to, stored, and processed in countries outside the UAE. Where this occurs, we take reasonable steps to ensure your data is protected to a standard consistent with the UAE PDPL, including relying on service providers with appropriate contractual data protection commitments and security certifications.

We retain your personal data only for as long as necessary to provide our services and maintain your account, comply with our legal, tax and accounting obligations (UAE law generally requires financial records to be retained for a minimum period — typically 5 years), and resolve disputes and enforce our agreements. We retain account and order data for as long as your account remains active, and for one year after your last order or account activity, after which it is securely deleted or anonymized. You may request earlier deletion of your account data, subject to our legal retention obligations.

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit (HTTPS/SSL), secure hashed storage of account passwords, payment processing handled entirely by PCI-DSS compliant Stripe, and restricted internal access to personal data on a need-to-know basis. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to protect your data using industry-standard practices.

Under the UAE PDPL, you have the right to access the personal data we hold about you, correct inaccurate or incomplete data, request deletion of your personal data (subject to our legal retention obligations), restrict or object to certain processing, withdraw consent at any time where processing is based on consent, request a copy of your data in a portable format, and lodge a complaint with the UAE Data Office. To exercise any of these rights, contact us at Maisonvelorascents@gmail.com.

Creating an account is required to browse certain features and to place an order on our Site. You are responsible for keeping your login credentials confidential. If you wish to delete your account entirely, please contact us at Maisonvelorascents@gmail.com, and we will delete or anonymize your data except where we are legally required to retain it.

Our Site and products are intended for use by individuals who are at least 18 years old. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

If you initiate a return or refund under our Return & Refund Policy, we will use your order, payment, and shipping data to process the return and issue any applicable refund through Stripe to your original payment method. Courier partners may also receive your address and contact data to arrange collection of returned items.

We do not send marketing or promotional emails. We will only contact you with service-related communications, such as order confirmations, shipping updates, and responses to your inquiries.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a new "Last Updated" date. We encourage you to review this Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Maison Velora (Trade License No. 1624217)
Email: Maisonvelorascents@gmail.com
Phone: +971 50 162 6249
Address: Al Barshaa 1, Dubai, United Arab Emirates

You also have the right to lodge a complaint with the UAE Data Office if you believe your personal data has been processed in violation of the UAE PDPL.